Fraudsters pose as a savings bank and are currently sending fake emails in different versions.

The aim of this phishing attack is to steal online banking access data, thereby tricking recipients into believing that they should be informed about a new security procedure called “S-CERT”, which is supposed to better encrypt and therefore secure the recipient’s data. Apparently this makes a new data protection reform necessary. In another case, the recipient is led to believe that they have important information in their electronic mailbox and that they now need active support so that the existing customer connection can be continued.

Screenshot of the fake emails
Screenshot of the fake emails

Phishing email 1 in full (sic!)

Dear customer,
we have placed important information for you in your electronic mailbox.
We need your active support so that your customer relationship can continue in the tried and tested manner. What do you have to do now?
Please read the message and the corresponding attachments in your electronic mailbox.
You can easily view these: Log in to online banking or the “Sparkasse” app and click on the envelope. We then ask for your prompt consent to our terms and conditions.
You can also give your consent with just a few clicks in online banking or in our savings bank app. We thank you in advance for your support and look forward to continued trusting cooperation!
Agree now.
Kind regards,
your savings bank


Phishing email 2 in full (sic!)

We are changing our procedures
Dear customer,
we would like to kindly inform you that our company will soon be implementing the so-called S-CERT changeover.
The main focus here is the security of your personalized data. Basically, we only benefit from more speed on our website, but due to further EU data protection reform we have to ask every customer to accept this.
You can do this conveniently and easily using the button.
Just log in normally and follow the steps. Register
We thank you for your understanding and apologize for the inconvenience.
Kind regards,
your savings bank


If you follow the instructions in the email, you will end up on a fake SPARKASSE website. Even if it looks like that of the Sparkasse, you shouldn't be deceived, because there are fraudsters behind it. You will first be asked to choose your savings bank and then enter your online banking access details!

Screenshot of the fake Sparkasse website
Screenshot of the fake Sparkasse website

CAUTION: Please do not enter any information on the phishing page. Your data could otherwise be misused by fraudsters, e.g. B. to call you in the name of your savings bank and entice you to provide a TAN. This can result in fraudulent online banking transfers in your name.

We and the Sparkassen-Finanzgruppe's computer emergency team therefore urgently warn against these emails. If you have already entered data, please contact your savings bank immediately about blocking your online banking access.

Notes:
1) This content reflects the current state of affairs at the time of publication. The reproduction of individual images, screenshots, embeds or video sequences serves to discuss the topic. 2) Individual contributions were created through the use of machine assistance and were carefully checked by the Mimikama editorial team before publication. ( Reason )